Download MiLAN MIL-SM2401MAF User guide
Transcript
MIL-SM2401MAF 24-Port 10/100 BASE-TX POE Two combo ports 10/100/1000BASE-T/1000Base-X SFP Advanced Managed Switch User Guide Rev.1.01 Nov-2009 FCC Warning This Equipment has been tested and found to comply with the limits for a Class-A digital device, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy. It may cause harmful interference to radio communications if the equipment is not installed and used in accordance with the instructions. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio/TV technician for help CE Mark Warning This is a Class-A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures. Transition Networks MIL-SM2401MAF Contents FCC Warning................................................................................................................. i CE Mark Warning .......................................................................................................... i INTRODUCTION ..........................................................................................................1 Features .......................................................................................................................1 Software Features ........................................................................................................2 Package Contents ........................................................................................................6 HARDWARE DESCRIPTION.......................................................................................7 Physical Dimension ......................................................................................................7 Front Panel ...................................................................................................................7 LED Indicators ..............................................................................................................8 Rear Panel..................................................................................................................10 Desktop Installation ....................................................................................................10 Attaching Rubber Pads........................................................................................10 Rack-mounted Installation ..........................................................................................11 Power On....................................................................................................................11 NETWORK APPLICATION........................................................................................12 Small Workgroup ........................................................................................................12 Segment workgroup....................................................................................................13 DC Power Input ..........................................................................................................14 CONSOLE MANAGEMENT.......................................................................................15 Connecting to the Switch ............................................................................................15 Login in the Console Interface ....................................................................................15 CLI Management ........................................................................................................16 Commands Level.................................................................................................16 Commands Set List .............................................................................................18 System Commands Set .................................................................18 Port Commands Set.......................................................................21 Trunk Commands Set ....................................................................25 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 i Transition Networks MIL-SM2401MAF VLAN Commands Set ....................................................................26 Spanning Tree Commands Set ......................................................31 QOS Commands Set .....................................................................35 IGMP Commands Set ....................................................................37 Mac / Filter Table Commands Set..................................................38 SNMP Commands Set ...................................................................40 Port Mirroring Commands Set........................................................41 802.1x Commands Set...................................................................42 TFTP Commands Set ....................................................................45 UPS Commands Set ......................................................................46 PoE Commands Set.......................................................................47 System log Commands Set............................................................48 SNTP Commands Set....................................................................49 WEB-BASED MANAGEMENT...................................................................................50 About Web-based Management .................................................................................50 Preparing for Web Management.................................................................................50 System Login ..............................................................................................................50 Port status ..................................................................................................................51 View the Port Information ....................................................................................53 Port Statistics..............................................................................................................53 Administrator ..............................................................................................................54 IP Address...........................................................................................................55 Switch Setting......................................................................................................55 Basic ............................................................................................................55 Advanced .....................................................................................................56 Misc Configuration........................................................................................58 Console Port Information.....................................................................................59 Port Controls........................................................................................................60 Trunking ..............................................................................................................61 Aggregator setting ........................................................................................61 Aggregator Information.................................................................................63 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 ii Transition Networks MIL-SM2401MAF Aggregator State Activity ..............................................................................64 Forwarding and Filtering......................................................................................65 IGMP Snooping ............................................................................................65 Static MAC Address .....................................................................................66 VLAN configuration..............................................................................................68 Port-based VLAN .........................................................................................68 802.1Q VLAN ...............................................................................................71 Spanning Tree .....................................................................................................76 System Configuration ...................................................................................77 Per Port Configuration ..................................................................................78 Port Mirroring.......................................................................................................80 SNMP Management ............................................................................................82 Security Manager ................................................................................................83 SNTP Configuration.............................................................................................84 802.1X Configuration...........................................................................................85 System Configuration ...................................................................................85 Per port Configuration ..................................................................................86 Misc Configuration........................................................................................87 System Log..........................................................................................................87 Save Configuration ..............................................................................................89 TFTP Update Firmware ..............................................................................................89 Configuration Backup .................................................................................................90 TFTP Restore Configuration................................................................................90 TFTP Backup Configuration ................................................................................91 Factory Default ...........................................................................................................91 System Reboot ...........................................................................................................92 Power Status ..............................................................................................................92 PoE Status..................................................................................................................93 TROUBLESHOOTING ...............................................................................................96 Incorrect connections..................................................................................................96 Faulty or loose cables ...........................................................................96 Non-standard cables .............................................................................96 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 iii Transition Networks MIL-SM2401MAF Improper Network Topologies ...............................................................97 Diagnosing LED Indicators .........................................................................................97 Diagnosing PoE problems ..........................................................................................97 TECHNICAL SPECIFICATION ................................................................................100 APPENDIX ...............................................................................................................103 Console Port Pin Assignments .................................................................................103 Cables ......................................................................................................................104 100BASE-TX/10BASE-T Pin Assignments...............................................................104 2 Gigabit Copper/SFP (mini-GBIC) combo port: .......................................................105 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 iv Transition Networks MIL-SM2401MAF Introduction The 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch is a multi-port Switch that can be used to build high-performance switched workgroup networks. This switch is a store-and-forward device that offers low latency for high-speed networking and allows the switch to auto-learn and store source address in an 8K-entry MAC address table. The switch is targeted at workgroup, department or backbone computing environment. The 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch has 24x auto-sensing 10/100Base-TX RJ-45 ports and all ports support PoE injector function. The switch has 2 auto-detected Giga port for higher connection speed. Also, the switch provides one extra 48VDC power input for the power supply input connection. Features 24 10/100 plus 2 Mini-GBIC /Gigabit Copper combo switch with 24 PoE injectors and build in 200W AC power Confirms to IEEE802.3 10BASE-T, 802.3u 100BASE-TX, 802.3ab 1000BASE-T, 802.3z Gigabit Fiber, 802.3af Power over Ethernet Provides extra DC 48V input with redundant function and management power status through RS-232 port High Back-Plane bandwidth 8.8Gbps Supports IEEE802.1w Rapid Spanning Tree Supports IGMP Snooping and IGMP Query mode for Multi-media application Port Mirror and Bandwidth Control supported Supports GVRP function End point insert mode remote power feeding Supports IEEE802.3x Flow Control Flow Control with full duplex 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 1 Transition Networks MIL-SM2401MAF Back Pressure with half duplex Supports Port Based VLAN /802 .1Q Tag VLAN Supports IEEE802.3ad Port Trunk with LACP Supports Spanning Tree protocol IEEE 802.1d Supports IEEE 802.1p Class of Service Supports IEEE 802.1x User Authentication Supports Broadcast Storm Filter Supports DHCP Client Supports SNTP Supports System Event Log Management by Web/SNMP/Telnet/Console Software Features SNMP management Telnet management Management Web management RS-232 terminal console for command line interface management RFC 1157 SNMP RFC 1213 MIB II RFC 1643 Ethernet like SNMP MIB RFC 1493 Bridge MIB RFC 2674 VLAN MIB private MIB RFC 1628 UPS MIB RFC3621 Power Ethernet MIB 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 2 Transition Networks MIL-SM2401MAF Cold start Link down Type of Trap Link up, Authorization fail Trap stations up to 3 Private trap for power supply device RFC 2030 SNTP RFC 2821 SMTP (option) RFC Standard RFC 1492 TACACS+ (option) RFC 1215 Trap RFC 1757 RMON 1 Software Upgrade TFTP Console Support IEEE802.3ad with LACP function Port Trunk Up to 7 trunk groups and group members up to 4 The trunk port within 24-port 10/100TX and extension module Spanning Tree IEEE802.1d Spanning Tree IEEE802.1w Rapid Spanning Tree Port based VLAN VLAN IEEE802.1Q Tag VLAN VLAN groups up to 256 The VLAN ID can be assigned from 1 to 4094 Per system supports high and low queues Class of Service The priority service rule: first come first service, all High before Low, WRR for High or low weight 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 3 Transition Networks MIL-SM2401MAF Supports 3 settings: Disable, Low or High priority Port Based Priority When set to “Disable”, the income packet will follow QOS policy; Otherwise, the packet will follow port priority setting to “High/Low” queue IGMP Port Security IGMP snooping for multimedia application and supports 256 groups Ingress and egress MAC address filter and static source MAC address lock Global system supports 3 mirroring types: RX, TX and Port Mirror Both packet The maximum of port mirror entries is up to 25 Bandwidth Control Per port supports bandwidth control Per level 100Kbps IEEE802.1x User-Authentication and can report to RADIUS server 802.1x Authentication Reject Accept Authorize Disable DHCP DHCP client Packet filter Broadcast storm filter 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 4 Transition Networks MIL-SM2401MAF Null: no PD presents Fault status detect Overload: current support over 475mA @ DC 48V and over 50 milliseconds DR fail: PD discovery resistor is not in the limited range Displays current PD parameters: Parametric information Discover-resistor detected value Current Voltage Power consumption Classification current Determined class Port Disable/Enable Port configuration PD detect control (enable/disable) control Classification detect control (enable/disable) DC disconnect detect control System detects status: Mode status I –sample V-sample R-detect SNTP RFC 2030 Simple Network Time Protocol SMTP RFC2821 Simple Mail Transfer protocol (option) System Log System Log record up to 1000 entries 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 5 Transition Networks MIL-SM2401MAF Power supply monitoring function for AC power, DC Power monitor power Additional DC power supply can be installed with PoE switch, and PoE-UPWM Power testing Supports power supply testing (CLI) Package Contents Unpack the contents of the 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch and verifies them against the checklist below: 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch x 1 Power Cord x 1 Rubber Pad x 1 Rack-mounted kit x 1 RS-232 cable x 1 User Manual x 1 Compare the contents of the 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch package with the standard checklist above. If any item is missing or damaged, please contact the local dealer for exchanging. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 6 Transition Networks MIL-SM2401MAF Hardware Description This chapter mainly describes the hardware of the 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch and gives a physical and functional overview on the certain switch. Physical Dimension The physical dimension of 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch is 440mmx 280mm x 44mm (W x D x H) Front Panel The front panel of the 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch consists of 24x 10/100Base-TX RJ-45 ports (Auto MDI/MDIX), 2 auto-detected Gigabit Copper/Mini-GBIC ports, and one console port. The LED Indicators are also located on the front panel of the Switch. Front panel of the 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch RJ-45 Ports (Auto MDI/MDIX): 24x 10/100 N-way auto-sensing for 10Base-T or 100Base-TX connections. In general, MDI means connecting to another Hub or Switch while MDIX means connecting to a workstation or PC. Therefore, Auto MDI/MDIX would allow connecting to another Switch or workstation without changing non-crossover or 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 7 Transition Networks MIL-SM2401MAF crossover cabling. 2 Giga port: Traditional RJ-45 ports can be used for uplinking wide-band paths in short distance (< 100 m), or the appropriate replaceable mini-GBIC ports can be used for the application of wideband uplinking and long distance transmissions to fit the field request flexibly. LED Indicators The LED indicators display a real-time indication of systematic operation status. There are three LED-Indicators (Link/Activity, Full duplex, power forwarding) for each UTP port and one power LED for the system unit. The following table provides descriptions of the LED statuses and meaning. LED indicators LED Status Description Green Power On OFF Power is not connected Green The port is connecting with the device. Power LNK/ACT 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 8 Transition Networks MIL-SM2401MAF BLINK The port is receiving or transmitting data. OFF No device attached. Orange The port is operating in Full-duplex mode. OFF In Half-duplex mode FDX Green The PoE Injector function is on and power is forwarding the attached PD device Power Forwarding OFF Green Orange LNK/ACT (25 & 26 The PoE injector function disables The port is connecting with the device and operating at speed of 1000Mbps The port is connecting with the device and operating at speed of 100Mbps port /Giga port) FDX/COL (25 & 26 port /Giga port) BLINK The port is receiving or transmitting data. OFF No device attached Orange The port is operating in Full-duplex mode 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 9 Transition Networks MIL-SM2401MAF BLINK Collision of Packets occurs in the port OFF In Half-duplex mode Rear Panel The two fans, two console ports, and the 3-pronged power plugs are located at the rear panel of 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch shown as below. The switch also provides one DC 48V input for the extra power connection and one DC 48V internal power supply for the power redundant. The two-console ports are for connecting with UPS device to manage UPS device or connect with the power supply device for managing it. The rear panel of the 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch Desktop Installation Set the switch on a sufficiently large flat space with a power outlet nearby. The surface where you put your switch should be clean, smooth, level and sturdy. Make sure there is enough clearance around the switch to allow attachment of cables, power cord and allow air circulation. Attaching Rubber Pads 1. Make sure mounting surface on the bottom of the switch is grease and dust free. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 10 Transition Networks MIL-SM2401MAF 2. Remove adhesive backing from the Rubber Pads. 3. Apply the Rubber Pads to each corner on the bottom of the switch. These footpads can prevent the switch from shock/vibration. Rack-mounted Installation The switch come with a rack-mounted kit and can be mounted in an EIA standard size, 19-inch Rack. The switch can be placed in a wiring closet with other equipment. Perform the following steps to rack mount the switch: 1. Position one bracket to align with the holes on one side of the switch and secure it with the smaller bracket screws. Then attach the remaining bracket to the other side of the switch. 2. After attaching both mounting brackets, position the 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch in the rack by lining up the holes in the brackets with the appropriate holes on the rack. Secure the switch to the rack with a screwdriver and the rack-mounting screws. [Note] For proper ventilation, allow about at least 4 inches (10 cm) of clearance on the front and 3.4 inches (8 cm) on the back of the switch. This is especially important for enclosed rack installation. Power On Connect the power cord to the power socket on the rear panel of the switch. The other side of power cord connects to the power outlet. The internal power supply of the Switch works with AC voltage range of 100-240V and Frequency of 50~60Hz. Check the power indicator on the front panel to see if power is properly supplied. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 11 Transition Networks MIL-SM2401MAF Network Application This section provides a few samples of network topology in which the switch is used. In general, the 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch with its large address table (8K MAC address) and high performance are ideal for interconnecting networking segments. PC, workstations, and servers can communicate each other by directly connecting with 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch. The switch automatically learns node addresses, which are subsequently used to filter and forward all traffic based on the destination address. 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch provides PoE injector function on every Ethernet port which can provide the power to the PD device, such as AP or switch. It can solve the problem of the PD device position limitation of power supply. Using Uplink port, the Switch can connect with another switch or hub to interconnect other small-switched workgroups to form a larger switched network. Meanwhile, you can also use fiber ports to connect switches. Small Workgroup 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch can be used as a standalone switch to which personal computers, server, printer server, are directly connected to form a small workgroup. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 12 Transition Networks MIL-SM2401MAF Small Workgroup Application Segment workgroup For enterprise networks where large data broadcasts are constantly processed, this switch is an ideal solution for department users to connect to the corporate backbone. In the illustration below, two managed PoE switches with PCs, print server, local server, wireless AP (IEEE 802.3af compliant), and IP camera (IEEE 802.3af compliant) attached are both connect to the core switch. All the devices in this network can communicate with each other through the core switch. 24-Hour Technical Support: 1-800-260-1312 Segment workgroup Application International: 00-1-952-941-7600 13 Transition Networks MIL-SM2401MAF DC Power Input The 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch has a DC 48V power input for the extra power supply connection. The DC 48V power input can be used as a power backup when the AC power is down or no AC power supply in the installation. The AC power and the DC 48V power can be connected at the same time, but the switch will use the DC 48V as the master power input and the AC power as the secondary or backup power input. The following figures are example of the application. In the figure, the DC 48V power input connects with the power supply device and through the RS-232 connection to manage the power supply device. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 14 Transition Networks MIL-SM2401MAF Console Management Connecting to the Switch The console port is a female DB-9 connector that enables a connection to a PC or terminal for monitoring and configuring the Switch. Use the supplied RS-232 cable with a male DB-9 connector to connect a terminal or PC to the Console port. The Console configuration (out of band) allows users to set switch for remote terminal as if the console terminal were directly connected to it. Login in the Console Interface When the connection between switch and PC is ready, turn on the PC and run a terminal emulation program or Hyper Terminal and configure its communication parameters to match the following default characteristics of the console port: Baud Rate: 9600 bps Data Bits: 8 Parity: none Stop Bit: 1 Flow control: None The settings of communication parameters After finishing the parameter settings, click “OK“. When the blank screen shows up, press Enter key to bring out the login prompt. Key in the ‘root’ (default value) for the 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 15 Transition Networks MIL-SM2401MAF both User name and Password (use Enter key to switch), then press Enter key and the Main Menu of console management appears right after as below. The figure shown below is a login screen: Console login screen CLI Management The system supports console management—CLI command. After logging in to the system, a command prompt shows up. To enter CLI management interface, enter “enable” command. The following tables list the CLI commands and description. Commands Level Modes Access Prompt Method Exit Method About This Mode The user commands Begin a User EXEC session with Enter logout switch> or quit. your switch. available at the user level are a subset of those available at the privileged level. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 16 Transition Networks MIL-SM2401MAF Use this mode to • Perform basic tests. • Display system information. The privileged Enter the Privileged EXEC command is advance enable command Enter disable switch# to exit. while in user mode Privileged this mode to • Display advance EXEC mode. function status • Save configures Enter the Global Configuratio n To exit to configure Use this mode to privileged command switch while in (config)# privileged EXEC mode, enter exit or end EXEC mode. configure parameters that apply to your switch as a whole. Enter the vlan database VLAN command switch database while in (vlan)# To exit to user EXEC mode, enter exit. privileged Use this mode to configure VLAN-specific parameters. EXEC mode. Enter the To exit to interface global command configuration Interface (with a mode, enter configuratio specific n interface) switch (config-if)# exit. To exist to while in global privileged configuration EXEC mode, mode or end. 24-Hour Technical Support: 1-800-260-1312 Use this mode to configure parameters for the switch and Ethernet ports. International: 00-1-952-941-7600 17 Transition Networks MIL-SM2401MAF Enter the ups To exit to command while in UPS switch(ups)# privileged Enter the PoE while in PoE privileged EXEC mode, enter exit EXEC mode. command Use this mode to UPS privileged To exit to privileged # EXEC mode, EXEC mode. switch. Use this mode to PoE switch(PoE) enter exit parameters for the parameters for the switch. Commands Set List System Commands Set Commands system name [word] Command Global configuration mode system Global location configuration [word] mode system Global description configuration [word] mode system contact [word] Description Level Global configuration mode Set switch system name string Set switch system location string Set switch system description string Set switch system contact window string 24-Hour Technical Support: 1-800-260-1312 Defaults Example Switch (config)# system name xxx Switch (config)# system location xxx Switch (config)# system description xxx Switch (config)# system contact xxx International: 00-1-952-941-7600 18 Transition Networks MIL-SM2401MAF Use the ip address interface configuration ip address [IP-address] [subnet-mask ] [ gateway] Global configuration mode command to set an IP address for a switch. Use the no form of this command to remove an IP address or to Switch (config)# ip address 192.168.1.1 255.255.255.0 192.168.1.254 disable IP processing. Switch# write write [memory| terminal] Privileged EXEC The “write memory” is memeory save configuration Update NVRAM and the “write to Flash Complete terminal” is show all configuration. Switch# write terminal Global reload configuration mode Halt and perform a Switch (config)# cold restart reload Global default configuration Restore to default mode username [word] password [word] Switch (config)# default Global Changes a login Switch (config)# configuration username. (maximum username mode 10 words) xxxxxx Global configuration mode Specifies a password (maximum 10 words) 24-Hour Technical Support: 1-800-260-1312 Switch (config)# password xxxxxx International: 00-1-952-941-7600 19 Transition Networks MIL-SM2401MAF Switch# show show Privileged Show username & accounting accounting EXEC password Username: root Password: root Switch> show system-info Name: switch1 show system-info User EXEC Show system information location: lab Description: layer2 switch Contact: somewhere Serial NO: 1.00 Switch# show ip address ip: 192.168.1.1 show ip Privileged EXEC Show IP information Address subnet: 255.255.255.0 Address gateway: 192.168.1.254 Switch> show show version User EXEC Use the show version version user EXEC command Firmware to display version version: 1.0 information for the Hardware hardware and version: 3.0 firmware. Kernel version: 1.10 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 20 Transition Networks MIL-SM2401MAF Port Commands Set Commands Command Description Level interface [FastEthernet Interface /module configuration Ethernet] [slot mode id] [id] Defaults Use the fast Ethernet Switch (config)# interface configuration interface command fastEthernet 0/1 Use the module Switch (config)# Ethernet interface interface configuration moduleEthernet command 1/1 Use the duplex Switch (config)# configuration command to specify the duplex mode of interface Auto duplex [full | half| auto] duplex full Ethernet. configuration mode Use the duplex Switch (config)# configuration interface command to specify the duplex mode of Auto [10 | 100 | auto] Interface configuration mode moduleEthernet 1/1 operation for module Switch (config-if)# Ethernet. duplex full Use the speed speed fastEthernet 0/1 Switch (config-if)# operation for Fast Interface Example Switch (config)# configuration command to specify the speed mode of operation for Fast Ethernet. 24-Hour Technical Support: 1-800-260-1312 interface Auto fastEthernet 0/1 Switch (config-if)# speed 10 International: 00-1-952-941-7600 21 Transition Networks MIL-SM2401MAF Use the speed configuration command to specify the speed mode of operation for module speed [10| 100 | 1000 | auto] Interface configuration Switch (config)# Ethernet. interface The 100Base-FX fastEthernet 1/2 module only mode Switch (config-if)# supported for speed speed 1000 100 The 1000Base-FX module only supported for speed 1000 & auto Use the flow control configuration command on Ethernet Switch (config)# interface flowcontrol on Interface ports to control traffic or no configuration rates during flowcontrol mode congestion. Switch (config-if)# Use the no form of this flowcontrol on On fastEthernet 0/1 command to disable security on the port. Use the security security on or no security configuration Switch (config)# Interface command on Ethernet interface configuration ports. mode Use the no form of this Switch (config-if)# command to disable security on Disable fastEthernet 0/1 security on the port. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 22 Transition Networks MIL-SM2401MAF Use the priority configuration Switch (config)# interface priority on Interface command on Ethernet [high | low] or configuration ports. no priority mode Use the no form of this Switch (config-if)# command to disable priority on high Disable fastEthernet 0/1 security on the port. Set bandwidth in or out Bandwidth [in | out] [value] Interface configuration mode Switch (config)# rate. The value rage is (0~999), and zero of the value is disable interface Disable fastEthernet 0/1 Switch (config-if)# (The module can’t be bandwidth in 50 setting) Use the state interface configuration State [Enable | Disable] Interface configuration mode Switch (config)# command to specify the state mode of operation for Ethernet ports. Use the disable form of this command interface Enable fastEthernet 0/1 Switch (config-if)# state disable to disable the port. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 23 Transition Networks MIL-SM2401MAF Switch (config)# show interface configuration Interface configuration mode interface show interface fastEthernet 0/1 configuration status Switch (config-if)# show interface configuration Switch (config)# show interface status Interface configuration mode interface show interface actual fastEthernet 0/1 status Switch (config-if)# show interface status Switch (config)# show interface accounting Interface configuration mode interface show interface statistic fastEthernet 0/1 counter Switch (config-if)# show interface accounting Switch (config)# show bandwidth Interface configuration mode Display the bandwidth of the values interface fastEthernet 0/1 Switch (config-if)# show bandwidth 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 24 Transition Networks MIL-SM2401MAF interface [FastEthernet Interface Use the fast Ethernet Switch (config)# /module configuration interface configuration interface Ethernet] [slot mode command fastEthernet 0/1 id] [id] Trunk Commands Set Commands Command Description Level Defaults Example Switch # show show group Privileged [group-ID] EXEC mode Display trunk group group 1 information. If there Group Trunk.1: is no group-number Ports: 02 03 04 in put, display all Priority: 0001 trunk groups. Lacp: Enable Work ports: 0 port group LACP: [group-ID] [port-list] lacp Add trunking [on | off] workp group. [work ports] no port group Global configuration mode Use the no form of this command to delete trunking group. [group-ID] lacp activityport [port ID] lacp on workp 2 Disable Trunk without LACP: Switch (config)# lacp off workp 4 [work ports] [group-ID] port group 1 1-4 port group 1 1-4 [on | off] workp port group Switch (config)# Switch (config)# Global configuration mode Set trunking group port active port group 3 activityport 2-4 Trunk.1 Lacp: 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 25 Transition Networks MIL-SM2401MAF Enable Check OK! NEW: 2 4 Update finished!! VLAN Commands Set Commands Vlan datatbase vlanmode [disable| portbase| 802.1q | gvrp] Command Description Level Privileged EXEC mode Defaults Example To enter the VLAN Switch# vlan configuration database interface Switch(vlan)# To set switch VLAN VLAN mode .Use database the no form of this mode command to Disable Switch (vlan)# vlanmode 802.1q restore to default. Port Base VLAN vlan [Group Name] grpid [Group ID] port [Port ID] VLAN database mode no vlan [Group VLAN Name] [Group database ID] mode show vlan [Group Name] [Group ID] or show vlan VLAN database mode Add new Port Base Switch (vlan)# vlan VLAN v2 grpid 2 port 1-4 Delete port base Switch (vlan)# no VLAN group vlan v2 2 Show VLAN of Group Name or Switch (vlan)# Group ID Show vlan v2 2 information 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 26 Transition Networks MIL-SM2401MAF vlan [Group VLAN name] add database [port ID] mode vlan [Group VLAN name] delete database [port ID] mode Set the port of Switch (vlan)# vlan some port group v2 add 5 Remove the port Switch (vlan)# vlan from it’s port group. v2 delete 5 802.1Q | 802.1Q with GVRP VLAN mode Add new 802.1Q vlan [Group name] vlanid [group ID] port [port ID] tag VLAN VLAN [group name]: Switch(vlan)# vlan database VLAN name v2 vlanid 2 port 1-4 mode [group ID]: 2 ~ 4094 tag 2-4 [port ID]: [port ID] port members 1~9 Switch(vlan)# vlan vlan [group name] add VLAN Set the port of [port ID] database some port group [tagged | mode tagged or untagged untagged] vlan [group VLAN name] delete database [port ID] mode no vlan [Group VLAN name] or database [group ID] mode v2 add 5-8 tagged or vlan v2 add 5-8 untagged Remove the port Switch(vlan)# vlan from its port group. v2 delete 5 Switch (vlan)# no Delete 802.1Q vlan v2 VLAN group Switch (vlan)# no vlan v2 2 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 27 Transition Networks MIL-SM2401MAF Add protocol vlan [group name]: vlan group name IP-ip ARP-arp Appletalk-app Appletalk_AARP-ap p_arp Novell_IPX-ipx Banyan_vines-bany an_c4 Banyan_vines-bany vlan protocol an_c5 [group name] [protocol value] vlanid [group ID] port [port ID] tag [port ID] Banyan_vines-bany VLAN an_ad database Decent_mop_01-de mode cent_01 Decent_mop_02-de cent_02 Decent_dpr-decent _dpr Decent_LAT-decen t_lat Switch(vlan)# vlan protocol v3 ip vlanid 2 port 5-8 tag 6,8 Switch(vlan)# vlan protocol v3 arp vlanid 2 port 5-8 tag 6,8 Switch(vlan)# vlan protocol v3 banyan vlanid 2 port 5-8 tag 6,8 Decent_LAVC-dece nt_lavc IBM SNA-ibm X.75 internet-x75 X.25 Layer3-x25 [VLAN ID]: 2 ~ 4094 [port ID]: port ID 1~10 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 28 Transition Networks MIL-SM2401MAF Set VLAN ID range [1~255] range 0 [256~511] range 1 [512~767] range 2 [768~1023] range 3 [1024~1279] range 4 [1280~1535] range 5 [1536~1791] range 6 [1792~2047] range 7 Switch (vlan)# vlanidrange 2 vlanidrange VLAN [2048~2303] range [VLAN ID database 8 range] mode [2304~2559] range OLD: 0 9 NEW: 2 [2560~2815] range 10 [2816~3071] range 11 [3072~3327] range 12 [3328~3583] range 13 [3584~3839] range 14 [3840~4094] range 15 VLAN protocol [Group name] add [port ID] [tagged | VLAN Set the port of Switch (vlan)# vlan database some port group protocol v2 add 5 mode tagged or untagged tagged 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 29 Transition Networks MIL-SM2401MAF untagged] VLAN protocol VLAN [Group name] database delete [port ID] mode show vlan [Group name] [Group ID] or show vlan Remove the port from its port group. Switch (vlan)# vlan protocol v2 delete 5 Show VLAN of VLAN Group Name or database VLAN ID mode information Switch (vlan)# show vlan v2 2 vlanid: 1 ~ 4094 show protocol vlan show vlan protocol VLAN Protocol database ip mode ipx Switch (vlan)# show vlan protocol netbios port [port ID] pvid [port VID] ingressfilter1 [on | off] ingressfilter2 VLAN database mode Set Port PVID and Switch (vlan)# port Ingress Filter 2 pvid 2 Rules1 & Ingress ingressfilter1 off Filter Rules2 ingressfilter2 on [on | off] Switch (vlan)# show port 2 show port [port ID] VLAN database mode show Port PVID Port ID: 2 and Ingress Filter Port Vid: 2 Rules1 & Ingress Ingress 1 Filter: Filter Rules2 Disable Ingress 2 Filter: Enable 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 30 Transition Networks MIL-SM2401MAF Spanning Tree Commands Set Commands Command Level Description Defaults Example Switch> show spanning-tree System: Priority: 32768 Max Age: 20 Hello Time: 2 show User EXEC spanning-tree mode Forward Delay: 15 Display a summary Priority: 32768 of the spanning-tree Mac Address: states. 004063800030 Root_Path_Cost: 0 Root Port: we are root Max Age: 20 Hello Time: 2 Forward Delay: 15 Use the spanning-tree [on / off] or Switch (config)# global configuration spanning-tree Global command to enable configuration Spanning Tree mode Protocol (STP). Use no spanning-tree the no form of the command to restore spanning-tree on Disable or Switch (config)# no spanning-tree to default 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 31 Transition Networks MIL-SM2401MAF Use the spanning-tree max-age global configuration spanning-tree priority [number] Global command to configuration change the priority. Switch (config)# 32768 mode spanning-tree priority 32767 Use the no form of this command to return to the default interval. Use the spanning-tree max-age global configuration command to change the interval between messages the spanning tree receives from the spanning-tree Global root switch. If a max-age configuration switch does not [seconds] mode receive a bridge Switch (config)# 20 sec spanning-tree max-age 15 protocol data unit (BPDU) message from the root switch within this interval, it recomputes the Spanning Tree Protocol (STP) topology. Use the 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 32 Transition Networks MIL-SM2401MAF no form of this command to return to the default interval. Use the spanning-tree hello-time global configuration command to specify spanning-tree Global the interval hello-time configuration between hello [seconds] mode bridge protocol data Switch (config)# 2 sec. spanning-tree hello-time 3 units (BPDUs). Use the no form of this command to return to the default interval. Use the spanning-tree cost interface configuration command to set the path cost for stp-path-cost [number] 10 Mbps – 100 Switch (config)# interface Interface Spanning Tree configuration Protocol (STP) mode calculations. In the 100 Mbps Switch (config-if)# event of a loop, – 10 fastEthernet 0/2 stp-path-cost 20 spanning tree considers the path cost when selecting an interface to place into the 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 33 Transition Networks MIL-SM2401MAF forwarding state. Use the no form of this command to return to the default value. Use the spanning-tree forward-time global configuration command to set the forwarding-time for the specified spanning-tree spanning-tree Global forward-time configuration [seconds] mode instances. The forwarding time determines how Switch (config)# 15 sec. spanning-tree forward-time 20 long each of the listening and learning states last before the port begins forwarding. Use the no form of this command to return to the default value. Use the Switch (config)# spanning-tree stp-path-priority [number] Interface port-priority configuration interface mode configuration command to configure a port 24-Hour Technical Support: 1-800-260-1312 interface 128 fastEthernet 0/2 Switch (config-if)# stp-path-priority 127 International: 00-1-952-941-7600 34 Transition Networks MIL-SM2401MAF priority that is used when two switches tie for position as the root switch. Use the no form of this command to return to the default value. QOS Commands Set Commands Command Level Description Defaults Example Enable/Disable qos storm-control Global broadcast storm [5|10|15|20|25| configuration control. Use the no off (%)] or no mode form of this command Switch (config)# OFF qos storm-control 5 to restore to default. storm-control qos low-priority-del Enable/Disable low ay-bound Global priority delay board. [on|off] [sec.] configuration Use the no form of or no qos mode this command to Switch (config)# OFF low-priority-delay -bound on 1 restore to default. low-priority-del qos ay-bound qos level [priority] no qos level [priority] Global configuration [Priority] 0~7 mode Global configuration [Priority] 0~7 mode 24-Hour Technical Support: 1-800-260-1312 0~3 LOW Switch (config)# 4~7 HI qos level 2,3 0~3 LOW Switch (config)# no 4~7 HI qos level 0-7 International: 00-1-952-941-7600 35 Transition Networks MIL-SM2401MAF WRR: Switch (config)# qos queuepolicy wrr hi 7 low 1 [Policy]:fcfs: first in First Come First and first out qos queuepolicy Global [Policy] hi configuration [number] low mode [number] wrr: weight round robin ahbl: all high before low. WRR Hi 2 Low 1 Served: Switch (config)# qos queuepolicy fcfs [Priority] Hi:1~7 Low:1 All High before Low: Switch (config)# qos queuepolicy ahbl qos bridge-delay-b ound [sec.] no qos bridge-delay-b Set qos bridge delay Global bound configuration Use the no form of mode this command to restore to default. ound Switch (config)# OFF qos bridge-delay-bou nd 1 Switch (config)# show qos storm-control Global configuration mode Show broadcast storm control. show qos storm-control QOS storm control mode: ENABLE show qos policy Switch (config)# Global configuration Show qos policy mode show qos policy Qos Mode: WRR 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 36 Transition Networks MIL-SM2401MAF Switch (config)# show qos Global low-priority-del configuration ay-bound mode show qos Show low priority low-priority-delay delay board. -bound Qos low priority delay bound: 1 Switch (config)# show qos Global bridge-delay-b configuration ound mode show qos Show bridge delay bridge-delay-bou bound nd bridge-delay-bound 5 IGMP Commands Set Commands igmp [on | off] Command Description Level Global Enable /Disable configuration IGMP snooping mode function igmp-query Global [auto |enable | configuration disable] mode Modify IGMP query mode Defaults Off Disable Example Switch (config)# igmp on Switch (config)# igmp-query enable Switch# show ip show ip igmp Privileged Displays the details of profile EXEC mode an IGMP profile entry. igmp profile IP VID Port 224.1.1.1 10 1,2,6 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 37 Transition Networks MIL-SM2401MAF Mac / Filter Table Commands Set Commands Command Description Level Defaults Use the Switch (config)# mac-address-table mac-address-table aging-time global command to set the ble aging-time ble aging-time [sec.] Switch (config)# length of time that a [on | off] mac-address-ta aging-time on configuration mac-address-ta mac-address-table dynamic entry Global remains in the MAC configuration address table after mode the entry is used or aging-time 333 300 secs mac-address-table Use the no form of mac-address-ta aging-time off this command to use ble aging-time (Disable) Switch (config)# updated. or no Example Or the default Switch(config)# no aging-time interval. mac-address-table The aging time aging-time applies to all VLANs. Use the mac-address-ta ble table [static | filter] hwaddr [MAC address] vlanid [VLAN-ID] Interface configuration mode mac-address-table Switch (config)# static to add static | interface filter addresses to the fastEthernet 0/2 MAC address table. Use the no form of N/A Switch (config-if)# mac-address-table this command to static hwaddr remove static entries 004063112233 from the MAC vlanid 10 address table. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 38 Transition Networks MIL-SM2401MAF Switch (config)# no Use the no mac-address-ta ble [static | Interface filter] hwaddr configuration [MAC address] mode vlanid mac-address-table privileged EXEC command to delete entries from the MAC address table. [VLAN-ID] interface fastEthernet 0/2 Switch (config-if)# no mac-address-table static hwaddr 004063112233 vlanid 10 Use the show show mac-address-table mac-address-ta Privileged user EXEC ble [static | EXEC mode command to display the MAC address filter] Switch # show mac-address-table static table. Use the show show mac-address-table mac-address-ta Privileged user EXEC ble command to display aging-time EXEC mode the MAC address table. 24-Hour Technical Support: 1-800-260-1312 Switch# show mac-address-table aging-time MAC Address aging-time: 300 International: 00-1-952-941-7600 39 Transition Networks MIL-SM2401MAF SNMP Commands Set Commands Command Level snmp Global system-name configuration [word] mode snmp Global system-location configuration [word] mode snmp Global system-contact configuration [word] mode community-strin [RO | RW] Or no snmp Set SNMP agent system name Set SNMP agent system location Defaults Example Switch (config)# N/A snmp system-name l2switch Switch (config)# N/A snmp system-location lab Switch (config)# Set SNMP agent system contact N/A snmp system-contact where Switch (config)# snmp gs [word] right Description Add SNMP snmp community string. community-strings Global Use the no form of configuration this command to mode remove the community-strin gs [word] PUBLIC RO public right RW Switch(config)# specified no snmp community. community-strings public right rw Switch(config)# snmp-server host [IP-address] Global community configuration [word] mode snmp-server host Configure SNMP server host information and community string 192.168.1.50 N/A community public Switch(config)# no No snmp-server 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 40 Transition Networks MIL-SM2401MAF host [IP snmp-server host address] 192.168.1.50 community community public [word] snmp Global system-name configuration [word] mode Set SNMP agent system name Switch (config)# N/A snmp system-name l2switch Port Mirroring Commands Set Commands Command Level Description Defaults Example Use the port monitor interface configuration command to port monitor enable Switch Switch (config)# Interface fastEthernet [RX|TX|both] Interface Port Analyzer [port ID] configuration (SPAN) port Or mode monitoring on a Switch (config-if)# port port. Use the no monitor both 3 no port monitor N/A 0/8 form of this command to return the port to its default value. show port Privileged monitor EXEC mode Use the show port Switch # show port monitor privileged monitor EXEC command State: Enable to display the AnalysisPortId: 8 ports for which Port 01 TxRx: Monitor Switched Port Port 02 TxRx: Analyzer (SPAN) Port 03 TxRx: 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 41 Transition Networks MIL-SM2401MAF port monitoring is Port 04 TxRx: enabled. Port 05 TxRx: Port 06 TxRx: Port 07 TxRx: Port 08 TxRx: Analysis Port 09 TxRx: Port 10 TxRx: OK. 802.1x Commands Set Commands show 8021x Command Level User EXEC mode Description Defaults Display a summary of the 802.1x properties N/A and also the port sates. Example Switch> show 8021x Use the 802.1x global 8021x [on | off] Global or configuration No 8021x mode configuration command to enable 802.1x protocols. Use the no Disable Switch (config)# 8021x on form of the command to restore to default Use the 802.1x system Switch (config)# 8021x system radius IP global 8021x system radiusip configuration command radiusip [IP address] Global to change the radius Or configuration server IP. no 8021x mode 192.16 8.16.3 192.168.1.1 (Default) system Use the no form of this Switch(config)# radiusip command to return to no 8021x system the default interval. radiousip 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 42 Transition Networks MIL-SM2401MAF Use the 802.1x system 8021x system sharekey global sharekey configuration command [number] Global to change the shared Or configuration key value. no 8021x mode Switch (config)# 8021x system sharekey 123456 123456 78 system Use the no form of this sharekey command to return to (Default) Switch (config)# no 8021x system sharekey the default interval. 8021x system Global serverport configuration [Port Number] mode serverport 1815 8021x system Global Switch (config)# accountport configuration [Port Number] mode 8021x system nasid [word] Switch (config)# set radius server port set accounting port 1813 8021x system 8021x system accountport 1816 NAS_L Global configuration 1812 set NAS ID mode 2_ SWITC H Switch (config)# 8021x system nasid test1 Use the 802.1x misc 8021x misc quietperiod [sec.] Or no 8021x misc quietperiod Global configuration mode quiet period global Switch (config)# configuration command 8021x misc to specify the quiet quietperiod 10 period value of the switch. 60 sec. (Default) Switch(config)# Use the no form of this no 8021x misc command to return to quietperiod the default interval. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 43 Transition Networks MIL-SM2401MAF 8021x misc txperiod [sec.] Global Or configuration no 8021x mode txperiod 8021x misc Global supptimeout configuration [sec.] mode 8021x misc Global servertimeout configuration [sec.] mode Use the 802.1x misc TX Switch (config)# period global 8021x misc configuration command txperiod 5 to set the TX period. 30 sec. (Default) Use the no form of this Switch(config)# no command to return to 8021x misc the default value. txperiod Set the period of time the switch wait for a supplicant response to Switch (config)# 30 sec. supptimeout 30 an EAP request. Set the period of time the switch waits for a server response to an 8021x misc Switch (config)# 30 sec. 8021x misc servertimeout 50 authentication request. Set the number of 8021x misc Global maxrequest configuration [Number] mode authentication that must time-out before authentication fails and Switch (config)# 2 8021x misc maxrequest 2 the authentication session ends. 8021x misc Global reauthperiod configuration [sec.] mode 8021x prostate [reject | accept | authorize | disable] Set the period of time after which clients connected must be Switch(config)# 3600 8021x misc reauthperiod 20 re-authenticated. Use the 802.1x port Switch (config)# Interface state interface interface configuration configuration command mode to set the state of the Switch (config-if)# selected port. 8021x portstate 24-Hour Technical Support: 1-800-260-1312 N/A fastethernet 0/3 International: 00-1-952-941-7600 44 Transition Networks MIL-SM2401MAF Reject: the specified accept port is required to be held in the unauthorized state. Accept: the specified port is required to be held in the Authorized state. Authorized: the specified port is set to the Authorized or Unauthorized state in accordance with the outcome of an authentication exchange between the Supplicant and the authentication server. Disable: The specified port is required to be held in the Authorized state. TFTP Commands Set Commands Command Description Level Global xt tftp [TFTP IP configuration address] [file Example Switch (config)# copy flash:config.te Defaults mode Backup configure file command copy flash:config.text tftp Server name] 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 45 Transition Networks MIL-SM2401MAF IP:192.168.1.1 Image Filename:backup. dat Switch(config)# Tftp:config.text tftp:config.text flash Global [TFTP IP configuration address] [file mode flash Restore configure file Server command IP:192.168.1.1 Image name] Filename:restore. dat Switch (config)# Tftp:firmware tftp:firmware flash Global [TFTP IP configuration address] mode flash Update firmware Server command IP:192.168.1.1 Image [file name] Filename:image.bi n UPS Commands Set Commands Command Level Description Defaults Example Switch status UPS mode Display a summary of (ups)#status the UPS status. Input Output Voltage……. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 46 Transition Networks MIL-SM2401MAF Switch (ups)# info UPS mode Info Company Show UPS information Name :xxx Model :xxx Version :xxx Test 10 UPS mode UPS will perform the Switch (ups)# self-test for 10 test10 seconds. test OK PoE Commands Set Commands status Command Level PoE mode Description Show PoE information Defaults Example Switch(PoE)# status Switch(PoE)# setpm [on | off] PoE mode Enabling or disabling setpm on the power Set Power management. Management Enable Enabling or disabling total power output limit. setlimit [value] When is enabling, the PoE mode total power output limit will follow the value Switch(PoE)# setlimit 100 that set in power limit max. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 47 Transition Networks MIL-SM2401MAF portebl [enable | disable] PoE mode [ports] portcls [enable | disable] PoE mode [ports] portmng [enable | disable] PoE mode [ports] portleg [enable | disable] PoE mode [ports] Enabling or disabling Switch(PoE)# the port PoE injected portebl disable function. 1-3 Enabling or disabling Switch(PoE)# per port power limit by portcls enable classification. 1-3 Enabling or disabling Switch(PoE)# per port power limit by portmng enable management. 2-5 Enabling or disabling Switch(PoE)# per port legacy portleg enable detection. 3-6 portpri Set port priority for the [critical | high PoE mode power supply | low] [ports] management. portplm Set per port power limit [value] [ports] PoE mode Switch(PoE)# portpri critical 2 Switch(PoE)# portplm 12200 Max. 5-7 System log Commands Set Commands show systemlog Command Description Level User EXEC Display system log. 24-Hour Technical Support: 1-800-260-1312 Defaults Example Switch> show systemlog International: 00-1-952-941-7600 48 Transition Networks MIL-SM2401MAF switch# show systemlog show Privileged Show system log client systemlog EXEC & server information Syslog Client: Enable Syslog Server Ip: 192.168.16.2 systemlog ip [IP address] Global configuration mode systemlog Global [enable | configuration disable] mode Switch(config)# Set System log server systemlog ip IP address. 192.168.1.100 Switch(config)# Enable or disable systemlog system log mode enable SNTP Commands Set Commands Command Description Level Defaults Example Switch(config)# sntp [enable | disable] Global configuration sntp enable Enable/Disable SNTP. mode Disable Switch(config)# sntp disable sntp ip [IP address] Global configuration mode sntp Global timezone configuration [value] mode Set SNTP server IP switch#sntp ip address. 192.168.16.123 Set time zone. 24-Hour Technical Support: 1-800-260-1312 Switch(config)# sntp timezone 8 International: 00-1-952-941-7600 49 Transition Networks MIL-SM2401MAF Web-Based Management This section introduces the configuration and functions of the Web-Based management. About Web-based Management On the CPU board of the switch there is an embedded HTML web site residing in flash memory, which offers advanced management features and allow users to manage the switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer. The Web-Based Management supports Internet Explorer 6.0. And, it is applied with Java Applets for reducing network bandwidth consumption, enhance access speed and present an easy viewing screen. Preparing for Web Management Before starting web management, user can use console to log in the switch for checking the default IP of the switch. Please refer to Console Management Chapter for console login. If user needs change IP address in first time, please use console mode to modify it. The default value is shown as below: IP Address: 192.168.1.77 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.1.254 User Name: root Password: root System Login 1. Launch the Internet Explorer on the PC 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 50 Transition Networks 2. MIL-SM2401MAF Key in “http:// “+” the IP address of the switch”, and then Press “Enter”. Uniform Resource Locator 3. The login screen appears right after. Login screen 4. Key in the user name and password. The default user name and password are the same as ‘root’ 5. Press Enter or click OK button, and then the home screen of the Web-based management shows up. Port status View every port status that depended on user setting and the negotiation result. Port: Displays the port number. Type: Displays the media type of the port. Link: Down is “No Link”. UP is for “Link”. State: Displays port status. Unlink will be regarded as “OFF”. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 51 Transition Networks MIL-SM2401MAF Negotiation: Displays the Auto Negotiation mode. Config column means that its value was configured by the user. Actual means the current value of the port. Speed Duplex: Displays port connection speed. Config column means that its value was configured by the user. Actual means the current value of the port. Flow Control: Displays the Flow Control status in full mode. Config column means that its value was configured by the user. Actual means the current value of the port. Back Pressure: Displays the Back Pressure status. Config column means that its value was configured by the user. Actual means the current value of the port. Bandwidth: Displays the in and out bandwidth of each port. Priority: Displays the port static priority status. Security: Displays the port security status. Port Status interface 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 52 Transition Networks MIL-SM2401MAF View the Port Information Click the port on the switch panel figure on the web page and a port information window will show up as below: Port information interface Port Statistics Display the current port statistic information Scroll down for more ports statistics Click Clear button to clean all counts 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 53 Transition Networks MIL-SM2401MAF Port Statistics interface Administrator Administrator function provides the following functions—IP Configuration, Switch Settings, Console Port Information, Port Controls, Trunking, Forwarding and Filtering, VLAN Configuration, Spanning Tree, Port Mirroring, SNMP Management, Security Manager, 802.1x Configuration, and System Log. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 54 Transition Networks MIL-SM2401MAF IP Address Configure the IP address and DHCP client function. DHCP Client: Enable or disable the DHCP client function. When DHCP client function is enabled, the switch will be assigned an IP address from the network DHCP server. Moreover, the default IP address will be replaced by the assigned IP address on DHCP server. After the user clicks Apply button, a popup window shows up. It is to inform the user that when the DHCP client is enabled, the current IP will lose and the user should find the new IP on the DHCP server. IP Address: Assign the switch IP address. The default IP is 192.168.1.77 Subnet Mask: Assign the switch IP subnet mask Gateway: Assign the switch gateway. The default value is 192.168.1.254 And then, click Reboot the switch Apply button IP configuration interface Switch Setting Basic Displays the switch basic information System Name: Displays the name of the switch. System Location: Displays the switch physical location. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 55 Transition Networks MIL-SM2401MAF System Description: Displays the description of the switch. Firmware Version: Displays the Firmware version of the switch. Kernel Version: Displays the Kernel Software version. Hardware version: Displays the Hardware version of the switch. MAC Address: Displays the unique hardware address assigned by manufacturer (default). Module: The module information. If the modules are not installed in the switch, this column will not be displayed. Switch basic setting interface Advanced Enable MAC Address Aging Out: Tick the check box to enable MAC address aging out function. Age-out Time: Key in the number of seconds that an inactive dynamic MAC address remains in the switch's address table. The valid range is from 300 ~ 765 seconds. The default value is 300 seconds. Max Bridge Transmit Delay Bound: Limit the packets queuing time in the switch. If the delay bound is set, the packets exceeding the queue time will be dropped. The valid values are 1sec, 2 sec, 4 sec, and off. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 56 Transition Networks MIL-SM2401MAF Enable Low Queue Delay Bound: Limit the low priority packets queuing time in the switch. If the low priority packet stays in switch exceeding Max Delay Time, it will be sent. The valid range is from 1 ~ 255 ms. [NOTE] Delay Bound must work under “Max bridge transit delay bound” function being in active status Broadcast Storm Filter Mode: To configure broadcast storm control, enable it and set the upper broadcast storm threshold. The threshold is the percentage of the total packet buffer used by broadcast traffic. When broadcast traffic for a port rises above the threshold you set, broadcast storm control becomes active. The valid threshold values are 5%, 10%, 15%, 20%, 25% and off. Click Apply button to complete the configuration. Switch Advanced setting interface 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 57 Transition Networks MIL-SM2401MAF Priority Queue Service settings: Select the priority queue service type. 801.1p Priority First Come First Service: The sequence of packets sent depend on arriving order. All High before Low: The high priority packets sent before low priority packets Weighted Round Ratio: Select the preference given to packets in the switch's high-priority queue. These options represent the number of high priority packets sent before one low priority packet being sent. For example, 5 High: 1 Low means that the switch sends 5 high priority packets before sending 1 low priority packet. Qos Policy (Checked for High Priority): 0 ~ 7 priority level can map onto high or low queue. Misc Configuration Collisions Retry Forever: Disable (in half duplex): When collisions occur, the system will retry 48 times and then drop frame. Enable (in half duplex): When collisions occur, the system will retry forever. Hash Algorithm: CRC Hash or Direct Map for MAC address learning algorithm. IFG Compensation: Enable or disable Inter Frame Gap time compensation. 802.1x Protocol: Enable or disable 802.1x protocol. IGMP Query Mode: Recognizes different queries from clients or servers to decide which Query will be the first priority. The modes are: a. Auto Mode: Choose the switch that has the lowest IP address to be set as the IGMP Query mode. b. Enable Mode: Enables the switch to be the IGMP Querier. c. Disable Mode: Disables the query function of the switch. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 58 Transition Networks MIL-SM2401MAF Switch Misc Config setting interface Console Port Information Console is a standard UART interface to communicate with Serial Port. Use windows HyperTerminal program to link the switch. Please refer to Console Management Console login for detail steps. Console port information displays as follow: Bits per seconds: 9600 Data bits: 8 Parity: none Stop Bits: 1 Flow control: none Console Port Information interface 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 59 Transition Networks MIL-SM2401MAF Port Controls Change the port status Select the port by scroll the list in Port column State: Current port status. The port can be set to disable or enable mode. If the port state is set as ‘Disable’, it will not receive or transmit any packet. Negotiation: Auto and Force. Being set as Auto, the speed and duplex mode are negotiated automatically. When you set it as Force, you have to assign the speed and duplex mode manually. Speed: It is available for selecting when the Negotiation column is set as Force. When the Negotiation column is set as Auto, this column is read only. Duplex: It is available for selecting when the Negotiation column is set as Force. When the Negotiation column is set as Auto, this column is read only. Flow Control: Set flow control function as Enable or Disable. When enabled, once the device exceed the input data rate of another device as a result the receiving device will send a PAUSE frame which halts the transmission of the sender for a specified period of time. When disabled, the receiving device will drop the packet if too much to process. Back Pressure: Set Back Pressure as ON or OFF in Half Duplex mode. Band Width: All ports support port ingress and egress rate control. For example, assume the wire speed of port 1 is 100Mbps; users can set its effective egress rate as 2Mbps, ingress rate as 1Mbps. The switch will perform Flow Control or Back Pressure to confine the ingress rate to meet the specified rate. In: Key in the port effective ingress rate. The valid range is from 0 ~ 999. 0 means rate control is disabled. Out: Key in the port effective egress rate. The valid range is from 0 ~ 999. 0 means rate control is disabled. Priority: The static priority is based on port. If the port is set as high priority, income frames from the port always are high priority frame. Security: When the port is in security mode, the port will be “locked” without permission of address learning. Only the incoming packets with static MAC already existing in the address table can be forwarded normally. User can disable 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 60 Transition Networks MIL-SM2401MAF the port from learning any new MAC addresses, and then use the static MAC addresses function to define a list of MAC addresses that can access to secure port. Click The port current configuration also will be displayed when the port is selected. Apply button to apply all configuration. Port Control interface Trunking The Link Aggregation Control Protocol (LACP) provides a standardized means for exchanging information between Partner Systems on a link to allow their Link Aggregation Control instances to reach agreement on the identity of the Link Aggregation Group to which the link belongs, move the link to that Link Aggregation Group, and enable its transmission and reception functions in an orderly manner. Link aggregation lets you group up to 4 ports into one dedicated connections. This feature can expand bandwidth to a device on the network. LACP operation requires full-duplex mode, more detail information refers to IEEE 802.3ad. Aggregator setting System Priority: A value which is used to identify the active LACP. The switch with the lowest value has the highest priority and is selected as the active LACP. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 61 Transition Networks Group ID: There are four trunk groups to be selected. Choose the "Group ID" and click MIL-SM2401MAF Select button. LACP: When enabled, the trunk group is using LACP. A port which joins an LACP trunk group has to make an agreement with its member ports first. When disabled, the trunk group is a static trunk group. The advantage of having the LACP disabled is that a port joins the trunk group without any handshaking with its member ports. But member ports won’t know that they should be aggregated together to form a logic trunk group. Work ports: This column field allows the user to type in the total number of active port up to four. With LACP trunk group, you create a trunk group by connecting two or more switches (e.g. you assign four ports to be the members of the trunk group whose work ports column field is set as two). The exceed ports are standby (the Aggregator Information tab will show standby status on the exceed ports) and can be aggregated if work ports fail. If it is a static trunk group, the number of work ports must equal the total number of group member ports. Select the ports to join the trunk group. The system allows four ports maximum to be aggregated in a trunk group. Click Add button to add the port which is focused to the left field. To remove unwanted ports, select the port and click Remove button. When LACP enabled, you can configure LACP Active/Passive status for each port on State Activity page. Click Use Apply Delete button. button to delete Trunk Group. Select the Group ID and click Delete button. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 62 Transition Networks MIL-SM2401MAF Trunking—Aggregator Setting interface Aggregator Information When you have setup the aggregator setting with LACP disabled, you will see the local static trunk group information in here. Group Key: Displays the trunk group ID. Port Member: Displays the members of this static trunk group. Trunking—Aggregator Information interface 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 63 Transition Networks MIL-SM2401MAF Aggregator State Activity Having set up the LACP aggregator on the tab of Aggregator Setting, you can configure the state activity for the members of the LACP trunk group. You can tick or cancel the checkbox beside the state display. When you remove the tick mark to the port and click Apply button, the port state activity will change to Passive. Active: The port automatically sends LACP protocol packets. Passive: The port does not automatically send LACP protocol packets, and responds only if it receives LACP protocol packets from the opposite device. [NOTE] 1. A link having either two active LACP nodes or one active node can perform dynamic LACP trunk. 2. A link having two passive LACP nodes will not perform dynamic LACP trunk because both ports are waiting for an LACP protocol packet from the opposite device. Trunking – State Activity interface 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 64 Transition Networks MIL-SM2401MAF Forwarding and Filtering IGMP Snooping The Internet Group Management Protocol (IGMP) is an internal protocol of the Internet Protocol (IP) suite. IP manages multicast traffic by using switches, routers, and hosts that support IGMP. Enabling IGMP allows the ports to detect IGMP queries, report packets, and manage IP multicast traffic through the switch. IGMP have three fundamental types of message shown as follows: Message Description A message sent from the querier (IGMP router or switch) Query asking for a response from each host belonging to the multicast group. A message sent by a host to the querier to indicate that the host wants to be or is a member of a given group indicated in Report the report message. Leave A message sent by a host to the querier to indicate that the Group host has quit being a member of a specific multicast group. The switch supports IP multicast. You can enable IGMP protocol via setting the IGMP Configuration page to see the IGMP snooping information. IP multicast addresses are in the range of 224.0.0.0 through 239.255.255.255. IGMP Protocol: Enable or disable the IGMP protocol. IGMP Query: Select the IGMP query function as Enable or Auto to set the switch as a querier for IGMP version 2 multicast networks. Click Apply button. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 65 Transition Networks MIL-SM2401MAF IGMP Snooping interface Static MAC Address When the user adds a static MAC address which will remains in the switch's address table, regardless of whether the device is physically connected to the switch. This saves the switch from having to re-learn a device's MAC address when the disconnected or powered-off device is active on the network again. MAC Address: Enter the MAC address of the port that should permanently forward traffic, regardless of the device network activity. Port Number: Select a port number. VLAN ID: If tag-based (802.1Q) VLAN are set up on the switch, key in the VID in the VLAN ID box to associate with the MAC address. And then, click To delete MAC address, press Add button. Delete 24-Hour Technical Support: 1-800-260-1312 button International: 00-1-952-941-7600 66 Transition Networks MIL-SM2401MAF Static MAC Address interface MAC filtering MAC address filtering allows the switch to drop unwanted traffic. Traffic is filtered based on the destination addresses. MAC Address: Enter the MAC address that you want to filter. VLAN ID: If tag-based (802.1Q) VLAN are set up on the switch, key in the VID in the VLAN ID field to associate with the MAC address. And then, click To delete MAC address, press Add button Delete 24-Hour Technical Support: 1-800-260-1312 button International: 00-1-952-941-7600 67 Transition Networks MIL-SM2401MAF MAC Filtering interface VLAN configuration A Virtual LAN (VLAN) is a logical network grouping that limits the broadcast domain, which would allow you to isolate network traffic, so only the members of the same VLAN will receive traffic from the ones of the same VLAN. Basically, creating a VLAN from a switch is logically equivalent of reconnecting a group of network devices to another Layer 2 switch. However, all the network devices are still plugged into the same switch physically. The switch supports Port-based and 802.1Q (tagged-based) VLAN. The default configuration of VLAN operation mode is “Disable”. [NOTE] To reboot the switch when the VLAN mode is changed Port-based VLAN Packets can go among only members of the same VLAN group. Note all unselected 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 68 Transition Networks MIL-SM2401MAF ports are treated as belonging to another single VLAN. If the port-based VLAN enabled, the VLAN-tagging is ignored. In order for an end station to send packets to different VLAN groups, it itself has to be either capable of tagging packets it sends with VLAN tags or attached to a VLAN-aware bridge that is capable of classifying and tagging the packet with different VLAN ID based on not only default PVID but also other information about the packet, such as the protocol. Click the hyperlink “Configuration” to enter the VLAN configuration interface VLAN – PortBase interface And then, click Add to create a new VLAN group 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 69 Transition Networks MIL-SM2401MAF VLAN—PortBase Add interface Key in the VLAN name, VLAN ID and select the members for the VLAN group. And then, click Apply 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 70 Transition Networks MIL-SM2401MAF The VLAN groups will be displayed in table To view the VLAN groups in next page, press To delete VLAN groups, press To modify VLAN groups, click Delete Edit Next Page to the next page button button [Note] If the trunk groups have been configured, the trunk groups will list in the port list (For example: Trunk1, Trunk2…). The trunk group also can be configured as the VLAN member. 802.1Q VLAN Tagged-based VLAN is an IEEE 802.1Q specification standard. Therefore, it is possible to create a VLAN across devices from different switch venders. IEEE 802.1Q VLAN uses a technique to insert a “tag” into the Ethernet frames. Tag contains a VLAN Identifier (VID) that indicates the VLAN numbers. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 71 Transition Networks MIL-SM2401MAF You can create Tag-based VLAN, and enable or disable GVRP protocol. There are 256 VLAN groups to provide configuration. Enable 802.1Q VLAN, all ports on the switch belong to default VLAN of VID 1. The default VLAN can’t be deleted. GVRP (GARP VLAN Registration Protocol) is a protocol that facilitates control of virtual local area networks (VLANs) within a larger network. GVRP conforms to the IEEE 802.1Q specification, which defines a method of tagging frames with VLAN configuration data. This allows network devices to dynamically exchange VLAN configuration information with other devices. GVRP is based on GARP (Generic Attribute Registration Protocol), a protocol that defines procedures by which end stations and switches in a local area network (LAN) can register and de-register attributes, such as identifiers or addresses, with each other. Every end station and switch thus has a current record of all the other end stations and switches that can be reached. 802.1q VLAN interface Click the hyperlink “Configuration” to enter the VLAN configuration interface. Enable GVRP Protocol: Ticked the check box to enable GVRP protocol. Enable security VLAN setting: Tick the check box to enable security VLAN group. When you select to enable security VLAN group, only the members in this 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 72 Transition Networks MIL-SM2401MAF VLAN group can access the switch. The steps of setting security VLAN refer to the following below steps in Basic section. After the security VLAN group has been configured, you can add other VLAN groups. [Note] Only one security VLAN group is allowed. Basic Click Group Name: Assign a name for the new VLAN. VLAN ID: Key in a VLAN ID (1-4094). The default is 1. Protocol VLAN: Choose the protocol type. Default is NONE. Add button. 802.1q VLAN –Add interface Group the ports, and then click Add 24-Hour Technical Support: 1-800-260-1312 button. If the trunk groups have been International: 00-1-952-941-7600 73 Transition Networks MIL-SM2401MAF configured, the trunk groups will list in the port list (For example: Trunk1, Trunk2…). The trunk group also can be configured as the VLAN member. And then, click Next will see the page as below: 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 74 Transition Networks MIL-SM2401MAF Set the outgoing frames as VLAN-Tagged frames or untagged. Tag: The outgoing frames involve VLAN tag. Untag: The outgoing frames don’t involve VLAN tag. And then, click Port VID: Configure port VID. VLAN ID: Set the port VLAN ID that will be assigned to untagged traffic on a given Apply button. port. This feature is useful for accommodating devices that you want them to join in the VLAN which doesn’t support tagging. Each port of the switch allows the user to set one VLAN ID (the range is from 1 ~ 255 and the default VLAN ID is 1). The VLAN ID must be as same as the VLAN ID of the VLAN group that the port belongs to, or the untagged traffic will be dropped. Ingress Filtering: Ingress filtering lets frames belonging to a specific VLAN to be forwarded if the port belongs to that VLAN. Enable: Forward only when the packets with VID match the configured VID of this port. Disable: Disable Ingress filter function. Acceptable Frame type: 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 75 Transition Networks MIL-SM2401MAF ALL: Acceptable all Packet. Tag Only: Only packets with matched VLAN ID have the permission to go through the port. And then, click Apply button. 802.1q VLAN – Port VLAN ID interface Spanning Tree The Spanning-Tree Protocol (STP) is a standardized method (IEEE 802.1d) for avoiding loops in switched networks. When STP enabled, to ensure that only one path at a time is active between any two nodes on the network. It’s recommended to enable STP on all switches to ensure only one active path on the network. The Rapid Spanning Tree Protocol (RSTP) is an evolution of the Spanning Tree Protocol and provides for faster spanning tree convergence after a topology change. The system also supports STP and the system will auto-detect the connected device that is running STP or RSTP protocol. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 76 Transition Networks MIL-SM2401MAF System Configuration User can choose the RSTP mode and view Root Bridge information. Modifying STP state: RSTP Mode: Set RSTP mode as 802.1d or 802.1w. Priority (0-61440): The switch with the lowest value has the highest priority and is selected as the root. If the value is changed, the user must reboot the switch. The value must be a multiple of 4096 according to the protocol standard rule. Max Age (6-40): The number of seconds a switch waits without receiving Spanning-tree Protocol configuration messages before attempting a reconfiguration. Enter a value between 6 through 40. Hello Time (1-10): The time that controls the switch to send out the BPDU packet to check RSTP current status. Enter a value between 1 through 10. Forward Delay Time (4-30): The number of seconds a port waits before changing from its Rapid Spanning-Tree Protocol learning and listening states to the forwarding state. Enter a value between 4 through 30. And then, click Apply button. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 77 Transition Networks MIL-SM2401MAF Spanning Tree – System Configuration interface Per Port Configuration Configure path cost and priority of every port Select the port in Port column. Path Cost: The cost of the path to the other bridge from this transmitting bridge at the specified port. Enter a number 1 through 200,000,000. Priority: Decide which port should be blocked by priority in LAN. Enter a number 0 through 240 (the port of the highest value will be blocked). The value of priority must be the multiple of 16. Admin P2P: Some of the rapid state transactions that are possible within RSTP are dependent upon whether the port concerned can only be connected to exactly one other bridge (i.e. it is served by a point-to-point LAN segment), or can be connected to two or more bridges (i.e. it is served by a shared medium LAN segment). This function allows the P2P status of the link to be manipulated administratively. True is P2P enabling. False is P2P disabling. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 78 Transition Networks MIL-SM2401MAF Admin Edge: The port directly connected to end stations won’t create bridging loop in the network. To configure the port as an edge port, set the port to “True” status. Admin Non Stp: The port includes the STP mathematic calculation. True is not including STP mathematic calculation. False is including the STP mathematic calculation. And then, click Apply button. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 79 Transition Networks MIL-SM2401MAF SPT – Per Port Configuration interface Port Mirroring The Port mirroring is a method for monitor traffic in switched networks. Traffic through ports can be monitored by one specific port which means traffic goes in or out monitored (source) ports will be duplicated into mirroring (analysis) port. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 80 Transition Networks MIL-SM2401MAF Prot Mirroring interface Port Mirroring State: Set mirroring mode—Disable, RX, TX, and Both. Analysis Port: Select one port to be the analysis port which can be used to see all monitored port traffic. User can connect mirror port to LAN analyzer or Netxray. Monitor Port: Tick the check box to monitor port traffic which will be copied to mirror (analysis) port (The maximum monitored ports are 25). [NOTE] If you want to disable the function, you must select analysis port to none. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 81 Transition Networks MIL-SM2401MAF SNMP Management The SNMP is a Protocol that governs the transfer of information between management and agent. The switch supports SNMP V1. Define management stations as trap managers and to enter SNMP community strings. System Options: Assign the name, location, contact information of the switch. Name: Key in a name for the switch. Location: Key in the switch physical location. Contact: Key in the name of contact person or organization. SNMP Management interface Community strings: Serve as password. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 82 Transition Networks MIL-SM2401MAF Strings: Key in the name of string. RO: Enable requests accompanied by this string to display MIB-object information (Read only). RW: Enable requests accompanied by this string to display MIB-object information and to set MIB objects (Read/Write). And then, click Trap Manager Add button. A trap manager is a management station that receives traps. The management station then generates alerts based on the received traps. If no trap manager is defined, no traps are issued. Create a trap manager by entering the IP address of the station and a community string. IP Address: Key in IP address of the trap manager. Community Strings: Key in the community strings And then, click Add button. Security Manager Change management login user name and password User name: Key in the new user name (the default is root). New Password: Key in the new password (the default is root). Confirm password: Enter the new password again. And then, click Apply button. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 83 Transition Networks MIL-SM2401MAF Security Manager interface SNTP Configuration Configure the SNTP (Simple Network Time Protocol) setting which SNTP allows the switch to synchronize switch clocks in the Internet. Use this page to Enable/Disable SNTP client; set SNTP server IP address, and UTC (Coordinated Universal Time) timezone. SNTP Client: Enable or disable SNTP function to get the time from the SNTP server. UTC Timezone: Enter between -12 and +13 in the UTC Timezone field. For example, 8.5 means UTC +8.5 hours. Server IP: Assign the SNTP server IP address. Switch Timer: Displays the current time of the switch. SNTP Configuration Interface 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 84 Transition Networks MIL-SM2401MAF 802.1X Configuration When the IEEE 802.1X protocol is enabled, user can configure the parameters of 802.1X. To enable the IEEE 802.1X protocol, go to Administrator Switch Setting Misc Config System Configuration Radius Server IP: Set the Radius Server IP address. Server Port: Set the UDP destination port for authentication requests to the specified Radius Server. Accounting Port: Set the UDP destination port for accounting requests to the specified Radius Server. Shared Key: Set an encryption key for use during authentication sessions with the specified radius server. This key must match the encryption key used on the Radius Server. NAS, Identifier: Set the identifier for the radius client. And then, click Apply button. 802.1x Configuration—System Configuration interface 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 85 Transition Networks MIL-SM2401MAF Per port Configuration Select the port in Port column Select the state of port: Reject: The specified port is required to be held in the unauthorized state. Accept: The specified port is required to be held in the Authorized state. Authorized: The specified port is set to the Authorized or Unauthorized state in accordance with the outcome of an authentication exchange between the Supplicant and the authentication server. Disable: When disabled, the specified port works without complying with 802.1x protocol. And then, click Apply button. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 86 Transition Networks MIL-SM2401MAF 802.1x Configuration—Per Port Configuration Misc Configuration Quiet Period: Set the period which the port doesn’t try to acquire a supplicant. TX Period: Set the period the port waits for retransmit next EAPOL PDU during an authentication session. Supplicant Timeout: Set the period of time the switch waits for a supplicant response to an EAP request. Server Timeout: Set the period of time the switch waits for a server response to an authentication request. Max Requests: Set the number of authentication that must time-out before authentication fails and the authentication session ends. Reauth period: Set the period of time which clients connected must be re-authenticated. And then, click Apply 802.1x Configuration – Misc Configuration interface System Log Configure the system event mode to collect system log. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 87 Transition Networks MIL-SM2401MAF System Log Client Mode: Select the system log mode—Client Only, Server Only, or Both. System Log Server IP Address: Assign the system log server IP. When Syslog Client Mode is set as Client Only, the system event log will only be reserved in the switch’s RAM until next reboot. When Syslog Client Mode is set as Server Only, the system log will only be sent to the syslog server and you have to type the IP address in the Sysylog Server IP Address column. If the Syslog Client Mode is set as Both, the system log will be reserved in the switch’s RAM and sent to server. Click Reload to refresh the events log. Click Clear After configuring, Click to clear all current events log. Apply . 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 88 Transition Networks MIL-SM2401MAF System Log Interface Save Configuration Save the configuration to the flash memory when the configurations have been changed. If users want to keep their configuration after rebooting the switch, they must save the configuration. Otherwise, the new configuration will be lost when the switch restart or power off. Click the Save Configuration button to save the configuration to the flash memory. Save Configuration Interface TFTP Update Firmware Use this page (TFTP—Trivial File Transfer Protocol) to configure to update the switch’s flash image bank. Place the updated image file on the TFTP server. TFTP Server IP Address: Key in TFTP server IP address. Firmware File Name: The name of firmware image. And then, click Apply button; the switch will download the new image file from TFTP server. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 89 Transition Networks MIL-SM2401MAF TFTP Update Firmware interface Configuration Backup Restore the backup configuration from TFTP server to the switch. Also, user can backup the configuration to TFTP server. TFTP Restore Configuration Restore the stored configuration file from TFTP server. Place the stored configuration file on the TFTP server. TFTP Server IP Address: Key in the TFTP server IP address. Restore File Name: Key in the correct restore file image name. And then, click Apply button. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 90 Transition Networks MIL-SM2401MAF TFTP Restore Configuration interface TFTP Backup Configuration Save current flash ROM value from the switch to TFTP server. TFTP Server IP Address: Key in the TFTP server IP address. Backup File Name: Key in the file image name. And then, click Apply button. TFTP Backup Configuration interface Factory Default Reset Switch to default configuration. Default IP address: 192.168.1.77 Default Gateway: 192.168.1.254 Subnet mask: 255.255.255.0 Click Default button to reset switch to default setting. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 91 Transition Networks MIL-SM2401MAF Factory Default interface System Reboot Reboot the Switch in software reset. Click Reboot button to reboot the switch. System Reboot interface Power Status View the connected UPS information and set command to UPS. Power Status Interface 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 92 Transition Networks MIL-SM2401MAF UPS information: The information will be available when the UPS is connected to the switch and the connection is normal and UPS is powered on. Click Refresh button to refresh. Input Voltage: Displays the current value, minimum, and maximum value of UPS input voltage. Output Voltage: Displays the current value, minimum, and maximum value of UPS output voltage. Frequency: Display the frequency value of UPS. Battery Capacity: Displays the battery capacity of UPS. UPS Overload: Displays the overload capacity of UPS. Temperature: Displays the current temperature of UPS. RatVoltage: Displays Range of the UPS voltage. RatBtyVoltage: Displays Range of the UPS battery voltage. RatCurrent: Displays Range of the UPS current. RatFrequency: Displays Range of the UPS frequency. Model: Model name of the UPS. Version: UPS internal software version. The figure represents the UPS status, when the status has been detected; the figure color will change from yellow to red and the status description will change, too. PoE Status View PoE port information and set configuration to each port. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 93 Transition Networks MIL-SM2401MAF Select the port and set configuration. And then, click Press the Apply Refresh button. button to refresh. PoE Status Interface Power Limit Management: Enable/disable the PoE power management function. Firmware: Displays the system firmware version. Total Power Limit: Set limit value of the total provided power to the PDs. Total Power (W): Displays the total power of all the port that provided to PDs. Port: Select the port you want to configure. Enable: Enable or disable the port status. Bypass Detection: Generally, this check box should not be ticked. Once this check box is ticked, the port will provide power without detecting whether the connected device is a PD or not. Power Limit by Classification: 24-Hour Technical Support: 1-800-260-1312 Tick this check box to enable/disable International: 00-1-952-941-7600 94 Transition Networks MIL-SM2401MAF power classification function. Power Limit by Management: Tick this check box to enable/disable the port power limit management for PoE power management. Detect Legacy Signature: By default, the PoE switch only provides power to the connected PD which follows the IEEE 802.3af standard. Having ticked this check box, the legacy detection is to identify the PD (not in compliance with the IEEE 802.3af standard) their unique electrical signatures in order for the PoE switch can provide the power to the PD. Priority: Set port priority for the PoE power management. 1 = C (critical), 2 = H (High), 3 = L (Low). Power Limit Max (mW) (<15400): Set the power limit value. The maximum value must less 15400mW. Fault Status: The PD error status message. Null: It means no PD is connected or the connected PD status is normal. Overload: It means the current is over the PD current classification limited (475mA @ 48V DC) over 50ms. Mode Status: The PD current operation mode status. V sample or I sample: It means Current sample or Voltage sample. When PD is detected and current is supplied, the PoE switch will keep detecting and sampling some current or voltage to ensure whether the PD is still active on the port. It is an IEEE 802.3af operating procedure. R detect: When the port doesn’t connect with any PD, the PoE switch will poll each port and detects the resistor. Discovery R (ohms): Displays the resistance value. Port Current (mA): Displays the current value. Port Voltage (V): Displays the voltage value. Port Power (W): Displays the watt value. Class Current (mA): Displays current class. When the Bypass classification is enabled, the class value will not show in here. Determined Class: Displays power class. When the Bypass classification is enabled, the class value will not show in here. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 95 Transition Networks MIL-SM2401MAF Troubleshooting This section is intended to help solve the most common problems on the 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch. Incorrect connections The switch port can automatically detect straight or crossover cable when the user links the switch with other Ethernet device. For the RJ-45 connector should use correct UTP or STP cable, 10/100Mbps ports use 2 pairs twisted cable. If the RJ-45 connector is not correctly pinned on right position, the link will fail. For fiber connection, please notice that fiber cable mode and fiber module should be match. Faulty or loose cables Look for loose or obviously faulty connections. If they appear to be OK, make sure the connections are snug. IF that does not correct the problem, try a different cable. Non-standard cables Non-standard and miss-wired cables may cause numerous network collisions and other network problem, and can seriously impair network performance. A category 5 cable tester is a recommended tool for every 100Base-T network installation. RJ-45 ports: use unshielded twisted-pair (UTP) or shielded twisted-pair (STP) cable for RJ-45 connections: 100 Ω Category 3, 4 or 5 cable for 10Mbps connections, 100 Ω Category 5 cable for 100Mbps connections, or 100 Ω Category 5e/6 cable for 1000Mbps connections. Also be sure that the length of any twisted-pair connection does not exceed 100 meters (328 feet). 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 96 Transition Networks MIL-SM2401MAF Improper Network Topologies It is important to make sure that the network topology is valid. Common topology faults include excessive cable length and too many repeaters (hubs) between end nodes. In addition, the user should make sure that the network topology contains no data path loops. Between any two ends nodes, there should be only one active cabling path at any time. Data path loops will cause broadcast storms that will severely impact the network performance. Diagnosing LED Indicators To assist in identifying problems, the switch can be easily monitored through panel indicators, which describe common problems the user may encounter and where the user can find possible solutions. If the power indicator does turn on when the power cord is plugged in, the user may have a problem with power outlet, or power cord. However, if the switch powers off after running for a while check for loose power connections, power losses or surges at power outlet. If the problem still cannot be solved, please contact the local dealer for assistance. Diagnosing PoE problems No Power Forward Make sure the connected PD device complies with IEEE 802.3af standard. The PoE switch only supports the IEEE 802.3af compliant PD. The PoE switch uses the signal power pair to forward power, the data and the power traverse the pin. Please check the documentation for your PD device to make sure the power pair it uses. The following table is the signal power pair RJ-45 port pin out: 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 97 Transition Networks MIL-SM2401MAF Pin Signal / Name 1 RX+ / VCC - 2 RX- / VCC - 3 TX+ / VCC + 4 NC 5 NC 6 TX- / VCC + 7 NC 8 NC When the PD device pin out is in MDI mode without bridge circuit function, please use the crossover cable for power and data transmission. Please refer to the above table for the pin out transform. (VCC-) 1 1 (VCC+) (VCC-) 2 2(VCC+) (VCC+) 3 3(VCC-) (VCC+) 6 6(VCC-) MDI-X MDI w/o bridge circuit When the PD device is in MDI mode with bridge circuit function, the straight forward and crossover cable both workable for power and data transmit. Please refer to the above table for the pin out antithesis. (VCC-) 1 1 (VCC+) (VCC-) 2 2(VCC+) (VCC+) 3 3(VCC-) (VCC+) 6 6(VCC-) MDI-X MDI w/ bridge circuit OR 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 98 Transition Networks MIL-SM2401MAF (VCC-) 1 1 (VCC-) (VCC-) 2 2(VCC-) (VCC+) 3 3(VCC+) (VCC+) 6 6(VCC+) MDI-X MDI w/ bridge circuit 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 99 Transition Networks MIL-SM2401MAF Technical Specification This section provides the specifications of the 24 10/100TX plus 2 Mini-GBIC/Copper managed PoE switch. IEEE802.3 10BASE-T IEEE802.3u 100BASE-TX IEEE802.3z Gigabit Fiber IEE802.3ab Gigabit 1000BASE-T IEEE802.3x Flow Control and Back pressure Standard IEEE802.3ad Port trunk with LACP IEEE802.1d Spanning tree protocol IIEEE802.1w Rapid spanning tree protocol IEEE802.1p Class of service IEEE802.1Q VLAN Tagging IEEE 802.1x user authentication IEEE802.3af Power over Ethernet System Power 10/100TX RJ-45 Port: Link/Active (Green), Full-duplex LED Indicators (Orange) Mini-GBIC/ Copper: Link/Activity (Green: 1000Mbps/ Orange: 10/100Mbps), Full duplex/collision (Orange) 10/100TX: 24 x RJ-45 Connector Gigabit Copper: 2 x RJ-45 2 Mini-GBIC for Mini-GBIC transceiver 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 100 Transition Networks MIL-SM2401MAF One RS-232 DB-9 female connector for switch RS-232 connector management 2 RS-232 DB-9 male connectors on rear side for DC power supply and UPS management Switch architecture Store and forward switch architecture. Back-plane Up to 8.8Gbps MAC address 8K MAC address table with Auto learning function Memory 3Mbits for packet buffer Flash ROM 512Kbytes x 2 System memory 8Mbytes x 1 Dimensions 440mm(W) x 280mm(D) x 44mm(H) Operating environment 0ºC ~ 40ºC, 10% ~ 95% RH Storage Temp. -40ºC ~ 70ºC (-40ºF ~ 158ºF), 95% RH Remote power End-point insert type and compatible with IEEE802.3af feeding Per port feeding power: 15.4Watts (maximum) Embedded AC power supply: AC 100 ~ 240V, 50/60Hz, Power 200W Extra power input: DC48V Power consumption 20W (maximum without PD) 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 101 Transition Networks MIL-SM2401MAF Ventilation 2 DC Fans with detection EMI FCC Class A, CE Safety UL, cUL, CE/EN60950 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 102 Transition Networks MIL-SM2401MAF Appendix Console Port Pin Assignments The DB-9 serial port on the front panel is used to connect to the switch for out-of-band console configuration. The console configuration program can be accessed from a terminal or a PC running a terminal emulation program. The pin assignments used to connect to the serial port are provided in the following tables. DB-9 Console Port Pin Numbers DB-9 Port Pin Assignments Switch’s EIA Circuit CCITT Signal Description DB9 DTE Pin # BB 104 BA 103 AB 102 RxD (Received Data) TxD (Transmitted Data) SGND (Signal Ground) PC DB9 DTE Pin # 2 2 3 3 5 5 Console Port to 9-Pin DTE Port on PC Switch’s 9-Pin Serial Port CCITT Signal PC’s 9-Pin DTE Port 2 RXD <---------RXD ------------ 3 TxD 3 TXD -----------TXD ----------> 2 RxD 5 SGND -----------SGND ---------- 5 SGND 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 103 Transition Networks MIL-SM2401MAF Cables The RJ-45 ports on the switch support automatic MDI/MDI-X operation, so you can use standard straight-through twisted-pair cables to connect to any other network device (PCs, servers, switches, routers, or hubs). Please refer to the following table for cable specifications. Cable Types and Specifications Cable Type Max. Length 10BASE-T Cat. 3, 4, 5 100-ohm 100BASE-TX Cat. 5 100-ohm 1000BASE-T Cat. 5e, 6 100-ohm UTP/STP 100 m (328 ft) UTP/STP 100 m (328 ft) UTP/STP 100 m (328 ft) Connector RJ-45 RJ-45 RJ-45 Cable specification table 100BASE-TX/10BASE-T Pin Assignments With 100BASE-TX/10BASE-T cable, pins 1 and 2 are used for transmitting data, and pins 3 and 6 for receiving data. RJ-45 Pin Assignments Pin Number Assignment 1 Tx+ 2 Tx- 3 Rx+ 6 Rx- Note: “+” and “-” signs represent the polarity of the wires that make up each wire pair. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 104 Transition Networks MIL-SM2401MAF All ports on this switch support automatic MDI/MDI-X operation, you can use straight-through cables for all network connections to PCs or servers, or to other switches or hubs. In straight-through cable, pins 1, 2, 3, and 6, at one end of the cable, are connected straight through to pins 1, 2, 3 and 6 at the other end of the cable. The table below shows the 10BASE-T/ 100BASE-TX MDI and MDI-X port pin outs. Pin MDI-X Signal Name MDI Signal Name 1 Receive Data plus (RD+) Transmit Data plus (TD+) 2 Receive Data minus (RD-) Transmit Data minus (TD-) 3 Transmit Data plus (TD+) Receive Data plus (RD+) 6 Transmit Data minus (TD-) Receive Data minus (RD-) 2 Gigabit Copper/SFP (mini-GBIC) combo port: The PoE switch has the auto-detected Giga port—Gigabit Mini-GBIC/Copper combo ports. The Gigabit Copper (10/100/1000T) ports should use Category 5e or above UTP/STP cable for the connection up to 1000Mbps. The small form-factor pluggable (SFP) is a compact optical transceiver used in optical communications for both telecommunication and data communications. They are for connecting to the network segment with single or multi-mode fiber. You can choose the appropriate SFP module to plug into the slots. Then use proper multi-mode or single-mode fiber according to the used SFP module. With fiber optic, it transmits at speed up to 1000 Mbps and you can prevent noise interference from the system; the transmission distance depending on the mini-GBIC module is up to 110 km. 24-Hour Technical Support: 1-800-260-1312 International: 00-1-952-941-7600 105